high8.1
CVE-2022-4020
Vulnerability in the HQSwSmiDxe DXE driver on some consumer Acer Notebook devices may allow an attacker with elevated privileges to modify UEFI Secure Boot set…
Impact
Vulnerability in the HQSwSmiDxe DXE driver on some consumer Acer Notebook devices may allow an attacker with elevated privileges to modify UEFI Secure Boot settings by modifying an NVRAM variable.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Acer | Aspire A315-22g Firmware | All versions |
| Acer | Aspire A115-21 Firmware | All versions |
| Acer | Aspire A315-22 Firmware | All versions |
| Acer | Extensa Ex215-21 Firmware | All versions |
| Acer | Extensa Ex215-21g Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://community.acer.com/en/kb/articles/15520-security-vulnerability-regarding-vulnerability-that-may-allow-changes-to-secure-boot-settings
- https://community.acer.com/en/kb/articles/15520-security-vulnerability-regarding-vulnerability-that-may-allow-changes-to-secure-boot-settings